$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383838303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a383838303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: yScQuK+O0Cctmnq0eb1fUoEuj1mDeuA/467QBXfoPL8= Subject key identifier: 37:16:B0:49:68:5F:E8:D2:A3:FC:66:80:25:1A:41:F0:97:56:96:C1 Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 64E9E4B6099BB450A0B79A0BA38009C4BF61D715 Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383838303a3a2f34342d3434203d3e20313333373938.roa Signing time: Fri 29 Aug 2025 03:17:42 +0000 ROA not before: Fri 29 Aug 2025 03:12:42 +0000 ROA not after: Fri 28 Aug 2026 03:17:42 +0000 asID: 133798 IP address blocks: 2402:5680:8880::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Sep 2025 00:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:e9:e4:b6:09:9b:b4:50:a0:b7:9a:0b:a3:80:09:c4:bf:61:d7:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Aug 29 03:12:42 2025 GMT Not After : Aug 28 03:17:42 2026 GMT Subject: CN=3716B049685FE8D2A3FC6680251A41F0975696C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2f:54:2b:51:bc:fe:9b:1b:c5:5c:c0:49:a2: 58:a6:d8:a7:1a:14:f9:ad:d5:24:38:5d:6d:c8:19: de:a1:22:f9:ac:87:47:2c:9d:8d:8c:b1:f7:36:76: 73:6c:9d:f6:b4:40:df:dc:21:80:36:6d:20:ae:bb: f6:33:bd:06:22:a9:24:a9:d5:78:7c:72:2e:bc:4c: a0:6a:3f:65:59:12:13:fb:8b:f8:b3:0d:d0:91:ff: 9a:02:8a:46:35:f3:97:c5:db:47:76:d7:3c:ae:89: 04:06:87:44:67:1b:b6:74:84:73:97:82:da:13:1d: 03:77:9d:ac:91:25:fd:43:95:09:59:58:c2:8c:8d: 3c:e6:d1:99:da:b6:3b:01:ea:b4:f4:5d:43:ae:b3: 86:c7:30:28:20:03:fb:5d:fc:16:45:87:71:37:25: b7:b0:97:84:a2:23:0f:32:5f:8d:1f:43:67:8d:48: da:df:95:c1:21:8f:99:48:08:38:82:b4:ca:68:b0: 4b:34:09:36:d3:9b:72:a8:0b:e0:59:d5:3c:0d:3f: 5f:0e:42:0d:41:68:ec:c1:21:6b:17:81:6b:5b:fa: 30:c0:49:0c:b9:e0:78:c4:c6:ca:bd:5d:74:58:1d: 5c:8a:f3:52:d6:74:72:51:bf:9d:c3:f8:66:58:91: 8d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:16:B0:49:68:5F:E8:D2:A3:FC:66:80:25:1A:41:F0:97:56:96:C1 X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383838303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8880::/44 Signature Algorithm: sha256WithRSAEncryption 8b:32:be:21:7b:5e:e8:f2:fd:91:e4:1a:96:c7:ff:1a:e1:23: 49:81:38:f1:99:b4:70:23:bd:44:e8:24:d5:31:0b:6b:f7:c8: 4e:b6:a8:c5:5e:55:8b:95:8a:4c:55:27:21:2b:87:23:f1:8e: a4:d4:0f:9c:f6:8d:21:74:23:49:9a:c4:25:bc:6a:47:4f:20: 08:0b:13:c7:82:e0:d7:d0:9c:ad:64:a3:c5:26:2b:8d:3c:aa: f7:da:a7:62:61:be:db:cd:bf:44:f6:e9:ea:5d:7c:24:d9:7a: 27:a2:a0:0b:df:c9:f6:53:31:41:e7:e1:49:96:19:d0:c8:8f: 40:6f:1b:e9:5b:70:53:3e:02:85:b2:28:b3:ae:0b:00:ec:08: 93:c0:f0:95:4e:8f:69:b3:95:b6:ae:68:24:07:af:bc:4a:48: d3:1a:28:06:58:53:e7:aa:58:79:d2:01:51:d3:c6:c7:74:ea: 76:ef:80:5b:e9:d2:36:ad:22:e8:e3:4b:28:d1:a7:50:52:96: d6:e1:a7:a6:fd:8b:3e:d3:f5:38:a2:93:02:f9:9a:5d:07:41: 2e:98:e5:b0:04:41:79:3d:d9:d3:4c:fc:ed:65:a6:1f:06:76: a3:1f:39:6f:14:2d:dd:da:04:49:02:91:90:06:66:c3:b3:e2: 7e:b8:03:b3 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUZOnktgmbtFCgt5oLo4AJxL9h1xUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA4MjkwMzEyNDJaFw0yNjA4MjgwMzE3NDJaMDMxMTAvBgNV BAMTKDM3MTZCMDQ5Njg1RkU4RDJBM0ZDNjY4MDI1MUE0MUYwOTc1Njk2QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaL1QrUbz+mxvFXMBJolim2Kca FPmt1SQ4XW3IGd6hIvmsh0csnY2Msfc2dnNsnfa0QN/cIYA2bSCuu/YzvQYiqSSp 1Xh8ci68TKBqP2VZEhP7i/izDdCR/5oCikY185fF20d21zyuiQQGh0RnG7Z0hHOX gtoTHQN3nayRJf1DlQlZWMKMjTzm0ZnatjsB6rT0XUOus4bHMCggA/td/BZFh3E3 Jbewl4SiIw8yX40fQ2eNSNrflcEhj5lICDiCtMposEs0CTbTm3KoC+BZ1TwNP18O Qg1BaOzBIWsXgWtb+jDASQy54HjExsq9XXRYHVyK81LWdHJRv53D+GZYkY1zAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUNxawSWhf6NKj/GaAJRpB8JdWlsEwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzODM4MzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAiIAwDQYJKoZIhvcNAQELBQADggEBAIsyviF7Xujy/ZHkGpbH/xrhI0mBOPGZ tHAjvUToJNUxC2v3yE62qMVeVYuVikxVJyErhyPxjqTUD5z2jSF0I0maxCW8akdP IAgLE8eC4NfQnK1ko8UmK408qvfap2JhvtvNv0T26epdfCTZeieioAvfyfZTMUHn 4UmWGdDIj0BvG+lbcFM+AoWyKLOuCwDsCJPA8JVOj2mzlbauaCQHr7xKSNMaKAZY U+eqWHnSAVHTxsd06nbvgFvp0jatIujjSyjRp1BSltbhp6b9iz7T9TiikwL5ml0H QS6Y5bAEQXk92dNM/O1lph8GdqMfOW8ULd3aBEkCkZAGZsOz4n64A7M= -----END CERTIFICATE-----Generated at Mon Sep 1 02:07:13 2025 by rpki-client